I am working on a document management system for a client. I am planning to set up the system so that documents are protected, sort of.. A user has an access level and based on that access level, a list of available documents will display as an HTML page and the user can click a hyperlink to download or view the selected document.
I am planning to handle this all through a SQL database and ASP..
What I would REALLY like to do, though, is protect a set of directories so that a user could not just enter a URL and download a document without being prompted for a username and password if he/she hasn't already logged in.
I have done something like this using AuthnetiX from Flicks Software, but this current client is trying to create a solution "on the cheap", and so I'd like to see if I can build the solution using the secuirty mechanisms built into the O/S.
What I'm thinking is that I'll set up the directories and assign a group access to each directory.. My question then is, can I add users to the "Local Users and Groups" for Windows 2000 via ASP?
I want to control the user name which is loggin into the application. Once the user is logged in, the username should be saved through out the system until the user logged out.
For that matter, how can i keep the user name? Should i use cookie or session? How is the difference and which is better?
I have my system set-up, where by when a user accesses the cms, a time stamp is added to the database. So we can keep check of when people accessed the system.
The added benefit of my addition, is that a session timeout is usable based on the inputted timestamp the user logged in. I added this functionaility because the system could be idle for some time and if so set the session to equal nothing or similar.
However what would be a nice feature of the cms is the display of the current user.
Below is code I have inputted to give some idea of what I am doing
Session("ADID") = objRS("adminID") objConn.Execute("UPDATE tblAdmin SET adminLastLogged=now() WHERE adminID=" & Session("ADID"))
Session.Timeout = 30 ' 30 = Minutes
SO does anyone know how I can retireve the adminUsername based on the session used when loggin into the system.
My win 2000 server is connected with MS SQL server 2000 There are around 10 applications on this server. Some webpage will be refereshed itself within 20 seconds to retrieve update data in sql server This server run 2 years till now. Recently we face the problems. When refershing the page, it show 503 and 504 error sometimes
I have the following codes working fine on one PC running Win2000 Server, but fails on another PC running WinXP. When I check the system log, it tells me the problem is on line 8, that is :-
I am working on a website for an intranet and need to know how I can authenticate by validating my user/password at ASP webpage against the winNT user/password. So not using a 2nd storage of passwords, but simply using the one set for login to the workstation/server.
I found one thread but it was PHP based. I did however notice some comment by alexgreg, so it makes me believe it IS possible. The thread taught me it is possible with PHP, but that it would be easier with ASP... so my question is how
Quote: Originally Posted by alexgreg You can't interface with the Windows password list via PHP, since it's a closed (but not overly secure) standard. The only way I ... the Linux machine, and then use the database for authentication. But this would be very complicated.
You could use PHP to call an ASP script on the NT server, using cURL (HTTP library for PHP) to send it the username/password and then get the HTTP response back and re-translate this into a true/false value. This would be a lot simpler than the above solution.
Very curious how to achieve this. I tried searching the web with google, but I ended up with loads of results, but I still haven't found what I need. The bold part above makes me believe it's not that hard to achieve, one just has to know how
I'm porting some code over to use ADS for user data lookup, but can't find a clear reference anywhere to the old windows 2000 userid (the network login). Does it still exist within LDAP, or will I have to match to sn & givenName?
I am currently developing a final year project which is a web based tracking system tracking exam questions. I am using IIS as the server, MS access for the database, and ASP with VBScript for the scripting side of things.
One of the things I want to do would be to e-mail a user/moderator whenever a exam question is edited/completed/updated. does anyone have any previous expierence in this? i don't even know where to start.
What is the asp code variable for System Date and System Time? Are they built-in system variables, or is there some code involved to return the values?
I use the following code to check if a user is an admin in the login page of our intranet.
Set User = GetObject("WinNT://" & UserDomain & "/" & UserName & ",user" For Each Group in User.Group Select Case Group.Nam Case "Domain Admins Session("Admin")=Tru Case "Domain Users Session("User")=Tru End Selec Nex
The code works fine on IIS5 and Windows 2000. I have set up a test server with Windows 2003 and IIS6 and created the same application, however the second line of this code returns an error message
Active Directory Error '80070005 General access denied erro
It's obvioulsy a permission issue but I cannot figure out how to get around it.
I have written an ASP.NET 2.0 application that uses Active Directory or ADAM to manage account users - the site has a page that allows people to create an account (much like any site). The page populates the AD with all the information and the user account but I am unable to enable the account. Microsoft has information on how to do that here --> http://msdn.microsoft.com/library/d...ting_a_user.asp (the sample is for Visual Basic) - and I am unable to complete the bottom portion of the script. Can some one point me in the right direction - or can you tell me how I can add a snippet of VBscript code to an ASP.NET page.
I am using the Active DS Type library - not sure why there are multiple ones (System.DirectoryServices) but it is rather confusing - I seem to accomplish one thing with one and another with the other (they did have trouble co-existing however). Anyway my script works very well but I am not able to access the properties required to enable the account.
Here is a simple version (no error checking) of the code.....
how to go about setting up an asp script or flash action script to take the input from a user of his/her username and password then send an email to the user with the information. I am able to do all of this but the problem is that the users pc is the one sending the email. I want the server to send the email instead.
I've created a system DSN called 'accessDSN' for a MS Access DB. I get an error when running the following.
Code : <% Set Con = Server.CreateObject("ADODB.Connection") Con.Open "accessDSN" sqlString = "INSERT INTO Products(product_name,product_price) values('Gift Basket',34.54)" Con.Execute sqlString Con.Close %>
Error :
Error Type: Microsoft OLE DB Provider for ODBC Drivers (0x80004005) [Microsoft][ODBC Microsoft Access Driver] Operation must use an updateable query. /asp/l52.asp, line 5
I want to stick with VB on this project. The only problem I have with this is that I might have a problem with printing. The POS system is designed on a small 10-15 computer networked system. They are all good systems so nonone say that it may be a little to intensive for the systems.
Now once the system runs through basic checks: change exchange, enough money to pay, and other smaller features then it has to print the invoice. Now we have a small Epson Thermol (prints like Lazer) printer. How would my VB application send that information to the printer?
Microsoft, in one of its "Help & Support" pages on ADO, says that a System DSN is three times faster than a File DSN. I find that a bit odd for the simple reason that won't it be faster for a script to access a file to get info about the database source than access the same info from the registry which will be the case if a System DSN is used instead of a File DSN?
I wanna build an email/messaging system whereby all members of a portal can send messsages to each other (internally). An example of this application would be the system available in www.friendster.com whereby all friendster members can message each other. Each member has his/her own inbox, trash, sent messages and so on. Can anyone help me with this? I would be eternally grateful
Secondly, i need help with building a forum as well. So far i'm having difficulties getting one that is easily customisable.
I have been working on a simple eLeave System. I would like to get more advice of my db design. Basically, I have 2 tables here: user and leave_application. I will just put the relevant field needed for leave calculation. user: date_employment, type, t_annual_entitled, t_annual_actual_taken, t_annual_balance leave_application: date_leave_from, date_leave_to There are 2 values under type, E - Executive and NE - Non-Executive.
Example - If type = E, t_annual = 22 - If date_employment = 7 July 2005, t_workingdays = 187 - So, my formula for t_annual_entitled = (22 * 187) / 365
So, is my db design and my formula okay for this system? Any other better ways?
Created a basic ASP/ADO/Access 2000 Newsletter system using JMail. Basically client has 300+ subscribers and wants to send 1 newsletter email to them all every 1 - 2 months.
Missed my client's call to say it wasn't working, but having checked with my ISP (FastHosts), they have some kind of embargo on the amount of emails that can be sent every 10 seconds.
how to create a simple rating system just like the ones on Amazon.com? I found a link which i tried and i think it is flawed. No attemp was made to provide the source files
At the beginning of the month,the whole DB server is down because of the change and upload of tables. So naturally the ASP pages would show errors. I have 1 dbconnect.asp page which gives the db connection information. How can I display a status.html based on the DB's down period?
I am spawning a process on the web using ProcessInfo and Process classes. Running on my dev. XP Pro machine all is fine. Running the same thing on w2k3 server I get "Access Denied" on the page. It seems like a security problem though I don't know how to resolve it. I have tried all sorts of combinations on directories, vdirs, etc.
Am implementing an alert system that will notify users by mail of activity on a pre-defined date. What function or event can I use to achieve auto-execution of this alert on a specified date without human intervention.
I wanna build a mail/messaging system whereby all registered members of a portal can send messages to one another (internally). An example of such an application would be the mail/messaging system at www.friendster.com whereby users can send messages to other friendster users. Can someone help me with this?
i need a rating system on my website were people would be able to vote out of to topics and once say 10 votes have been made it adds up the totals and inputs the result of the topic which won
I am currently working on a site that's hosted on IIS. I need to implement a user login system for multiple members. Basically I need to secure mulitple pages and each member would be directed to a different page once they log in.
For example:
client1 logs in and is directed to /client1/reports.html client2 logs in and is directed to /client2/reports.html
Also, it would be good to be able to display error message below the form if the username or password is incorrect.
I am new to asp and IIS and am having problems finding something that works easily. Can anyone refer me to a script that I can use? It can even be something retail, I have a small budget to pay for something that works.
I recently developed my first website and I hosted it on my pc.But when I try to access it from other computers, I am able to do that only when I turned the firewall off.Is there any possibility to access my website in internet on providing security to my system?
And one more problem is when ever I access any control on my webpage in internet, I am getting a dailogue box indicating that "connecting to mysite.dnsalias.com" and it is asking for userid and password.If any one knows please tell me why I'm getting the dailogue box and how to avoid getting it.